_: {
  security = {
    sudo.wheelNeedsPassword = false;
    pam.loginLimits = [
      { domain = "*"; type = "soft"; item = "nofile"; value = 1048576; }
      { domain = "*"; type = "hard"; item = "nofile"; value = 1048576; }
    ];
  };
}
